Doesn't matter really, keeping blobs hidden doesn't actually do anything except make it slightly harder to analyze the software. Making all blobs easily and readily available is exactly what I want the vendor to do. Black boxes don't make things secure.
The blogger will blow a gasket when they discover that the likes of GitHub provides access to both installers and software. A hacker's candy store!